Skip to contentSynology vulnerabilities
Products
Show 17 moreShow less
Newest
- synology presto clientAn uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672...CVE-2026-30916.7 Medium
- synology beedrive, beedrive for desktop +1 moreOrigin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3...CVE-2025-80745.6 Medium
- synology beedrive, beedrive for desktop +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2025-541607.8 High
- synology beedrive, beedrive for desktop +1 moreMissing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2...CVE-2025-541597.5 High
- synology beedrive, beedrive for desktop +1 moreMissing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for...CVE-2025-541587.8 High
- synology mail serverA vulnerability in Synology Mail Server allows remote authenticated attackers to read and write...CVE-2025-28486.3 Medium
- synology router manager, router manager (srm) +1 moreA vulnerability in portenable cgi allows remote authenticated users to get the status of...CVE-2025-298467.2 High
- synology router manager, router manager (srm) +1 moreA vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.CVE-2025-298454.3 Medium
- synology router manager, router manager (srm) +1 moreA vulnerability in FileStation file cgi allows remote authenticated users to read file metadata...CVE-2025-298444.3 Medium
- synology router manager, router manager (srm) +1 moreA vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image...CVE-2025-298435.4 Medium
- synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 moreImproper control of dynamically-managed code resources vulnerability in WebAPI component in...CVE-2024-54014.3 Medium
- synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 moreOut-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before...CVE-2024-455397.5 High
- synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 moreCross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation...CVE-2024-455389.6 Critical
- synology radius serverImproper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2024-139875.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2024-532885.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2024-532875.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2024-532867.2 High
- synology active backup for microsoft 365A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers...CVE-2025-4679Public exploit6.5 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreMissing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1...CVE-2025-10217.5 High
- synology drive serverImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2024-50631EPSS 26.8%7.5 High
- synology drive serverMissing authentication for critical function vulnerability in the webapi component in Synology...CVE-2024-50630EPSS 24.6%7.5 High
- synology beestation os (bsm), beestation os, diskstation manager (dsm) +3 more +5 moreImproper encoding or escaping of output vulnerability in the webapi component in Synology...CVE-2024-50629Public exploitEPSS 34.8%5.3 Medium
- synology camera firmware, bc500 firmware, cc400w firmware +1 more +3 moreA vulnerability regarding out-of-bounds read is found in the video interface. This allows remote...CVE-2024-111319.8 Critical
- syncology replication service, synology unified controller (dsmuc), unified controller +2 moreOff-by-one error vulnerability in the transmission component in Synology Replication Service...CVE-2024-1044210.0 Critical
- synology beestation os (bsm), beestation os, diskstation manager (dsm) +3 more +5 moreImproper certificate validation vulnerability in the update functionality in Synology BeeStation...CVE-2024-104454.3 Medium
- synology beestation os (bsm), beestation os, diskstation manager (dsm) +3 more +5 moreImproper encoding or escaping of output vulnerability in the system plugin daemon in Synology...CVE-2024-10441Public exploit9.8 Critical
- synology diskstation manager (dsm), diskstation manager +1 moreImproper certificate validation vulnerability in the LDAP utilities in Synology DiskStation...CVE-2024-104447.5 High
- synology active backup for business, active backup for business agent +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2024-472662.7 Low
- synology active backup for business, active backup for business agent +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2024-472656.5 Medium
- synology active backup for business, active backup for business agent +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2024-472644.9 Medium
- plex media serverAuthorization bypass through user-controlled key vulnerability in streaming service in Synology...CVE-2024-44647.5 High
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2024-532855.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2024-532845.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2024-532835.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2024-532825.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2024-532815.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2024-532795.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2024-532805.9 Medium
- synology surveillance stationIncorrect authorization vulnerability in ActionRule webapi component in Synology Surveillance...CVE-2023-529444.3 Medium
- synology surveillance stationIncorrect authorization vulnerability in Alert.Setting webapi component in Synology Surveillance...CVE-2023-529434.3 Medium
- synology router manager, router manager (srm) +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2024-113988.1 High
- synology beephotos, photos, photo station +2 moreImproper neutralization of special elements used in a command ('Command Injection') vulnerability...CVE-2024-10443EPSS 28.5%9.8 Critical
- synology active backup for business agentMissing authentication for critical function vulnerability in proxy settings functionality in...CVE-2023-529495.5 Medium
- synology active backup for business agentMissing encryption of sensitive data vulnerability in settings functionality in Synology Active...CVE-2023-529485.0 Medium
- synology active backup for business agentMissing authentication for critical function vulnerability in logout functionality in Synology...CVE-2023-529474.0 Medium
- synology active backup for business agentMissing encryption of sensitive data vulnerability in login component in Synology Active Backup...CVE-2023-529505.3 Medium
- synology drive clientBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup...CVE-2022-490414.4 Medium
- synology drive clientBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in...CVE-2022-490404.4 Medium
- synology drive, drive client +1 moreOut-of-bounds write vulnerability in backup task management functionality in Synology Drive...CVE-2022-490396.7 Medium
- synology drive, drive client +1 moreInclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component...CVE-2022-490387.8 High
- Show moreLoading…